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ABSTRACT 


Petri  nets  are  presented  as  a  technique  for  representing 
computer  systems  Having  asynchronous,  concurrent  operations. 
Tne  structure  of  tne  nets  are  analyzed  as  a  means  of 
demonstrating  the  correctness  of  tne  modeled  system.  Tne 
execution  of  tne  petrl  net  is  considered  as  a  stochastic 
process,  allowing  analysis  of  tne  model  as  a  queueing 
networx  system  by  transforming  tne  petri  net  into  Its 
stochastic  equivalent  net.  It  is  snown  tnat  product  form 
solutions  for  the  state  probabilities  exist  for  tne  class  of 
state  machine  decomposable  nets  but  not  for  tne  more  general 
class  of  consistent  petri  nets.  Solutions  for  the 
corresponding  open  systems  are  derived  by  extending  tne 
petri  net  model  to  Include  arbitrary  sources  and  sinus. 
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I.  INTRODUCTION 

Witn  tne  explosion  in  numbers  and  types  of  computer 
hardware  components  witnessed  in  the  past  few  years, 
computer  system  design  aas  become  an  extremely  complex  task. 
Cox  has  observed  [1]  : 

"Today's  computers  are  among  the  most  complex  man  made 
systems  in  existence  today.  The  development  of  such 
systems  represents  a  significant  commitment  of  physical 
and  mental  resources.  This  cost  can  only  be  justified  if 
these  computing  devices  serve  their  intended  purpose  — 
the  efficient  processing  of  data  in  response  to  specific 
needs." 

If  we  are  to  make  effective  use  of  these  development 
resources,  it  is  necessary  to  provide  the  system  designer 
with  tools  which  allow  him  or  her  to  create  and  analyze 
sophisticated  system  designs. 

Several  trends  have  emerged  which  have  accelerated  the 
searcn  for  new  and  better  design  tools.  The  low  cost  of  LSI 
and  VLSI  hardware  components  coupled  with  technological 
advances  in  digital  communications  nas  led  to  the  evolution 
of  a  wide  variety  of  multiprocessor  systems,  distributed 
computing  applications,  and  computer  networks,  is  early  as 
1976,  Anderson  and  Jenson  [2J  identified  27  different 
networking  schemes  being  used  in  prototype  or  actual 
systems.  Vhen  one  considers  the  number  of  communication 
protocols  and  transmission  media  which  have  been  proposed  or 
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i up lamented,  tae  number  of  variables  Involved  in  tne 
hardware  design  process  becomes  truly  awesome. 

Likewise,  Innovations  in  system  software  nave  given  rise 

to  such  concepts  as  distributed  operating  systems,  on-line 

data  bases,  and  interactive  programming,  to  name  a  few. 

Eobayashi  and  lonneim  [3j  nave  noted  that: 

"With  the  increasing  complexity  and  sophistication  of 
computer  communication  systems,  modeling  and  performance 
evaluation  [emphasis  tneir'sj  are  becoming  critical 
issues  in  the  design  and  operation  of  such  systems.  It 
is  apparent  that  for  a  cost-effective  design  we  must  be 
equipped  with  systematic  methods  of  predicting 
quantitative  relations  between  system  resource 
parameters,  system  workloads,  and  measures  of  system 
performance." 

Several  characteristics  of  these  systems  may  be 
identified  which  determine  what  types  of  models  are 
appropriate  for  performance  evaluation.  &  central  concept  is 
that  of  concurrent  or  parallel  processing.  Each  node  in  a 
network,  or  processor  in  a  multiprocessing  system,  is 
capable  of  independent  computation.  At  the  same  time,  system 
or  global  resources  such  as  memory  and  communication  links 
must  be  shared  by  the  various  processing  elements.  Tnis 
results  in  enforced  cooperation  between  otherwise 
Independent  processes. 

Since  most  resources  in  computing  systems  tend  to  be 
scarce  in  relation  to  the  demands  on  them,  contention  exists 
between  resource  users  which  must  be  arbitrated.  This 
problem  is  complicated  by  the  observation  that  demands  in 
computer  systems  are  not  constant.  For  example,  in  computer 
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communication  networks  empirical  evidence  snows  that  demands 
teid  to  be  bursty  and  sporadic.  As  a  result,  resource 
demands  must  be  viewed  as  stochastic  In  nature  and  system 
models  must  be  capable  of  expressing  tne  probabilistic 
elements  of  tne  modeled  system. 

The  uncertainty  In  resource  demand  results  in  two 
phenomena  which  must  be  considered  in  performance  modelinr. 
Tne  first  is  tne  creation  of  queues  of  users  whicn  require 
service  but  must  wait  for  resource  availability.  The  second, 
and  Interrelated,  phenomenon  is  the  delay  which  users 
experience  while  waitin*  for  resources  and  while  being 
served.  The  field  of  queueing  theory  has  attempted  to  answer 
tnese  questions  and  others  concerning  tne  probabilistic 
properties  of  systems  in  both  analytic  and  simulation 
models. 

One  purpose  of  performance  prediction  modeling  Is  to 
analyze  system  desiens  in  terms  of  performance  measures  or 
Indices.  Ferrari  [4j  has  Identified  three  performance  index 
classes:  productivity,  responsiveness,  and  utilization.  A 
number  of  specific  measurements  may  be  computed  from  the 
model  to  express  tnese  indices  —  throughput,  waiting  time, 
and  utilization  for  example. 

A  second  purpose  of  performance  modeling  is  to  verify 
proper  system  operation.  It  is  important  to  ensure  tnat  tne 
underlying  system  is  deadlock-free,  or  at  least  to  predict 
the  circumstances  under  which  deadlock  could  occur.  In 
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addition,  it  may  be  necessary  to  demonstrate  that  the  system 
enforces  syncnronitation  or  mutual  exclusion  among  elements 
of  the  system. 

It  is  not  sufficient  for  a  model  to  be  capable  of 
providing  answers  to  these  questions.  The  model  must  also  be 
amenable  to  validation?  that  is,  the  determination  of  how 
accurately  the  predicted  results  conform  to  tne  modeled 
system.  This  may  be  particularly  difficult  to  accomplish 
when  the  actual  system  does  not  exist  or  is  otherwise  not 
available.  Finally,  it  is  desirable  tnat  the  model  be  robust 
in  order  tnat  its  domain  of  validity  extend  over  as  large  a 
range  of  systems  as  possible. 

Performance  models  can  be  divided  into  two  separate 
types  ~  simulation  and  analytical,  A  simulation  may  take 
various  forms?  nowever,  the  form  most  often  associated  with 
performance  modeline  is  computer  based,  discrete  event 
simulation.  This  model  consists  of  a  program  which  describes 
the  state  of  the  modeled  system  in  terms  of  system  entitles 
and  their  attributes  at  each  point  in  time.  Attributes  are 
varied  as  a  result  of  tne  instantaneous  occurrence  of  events 
in  the  system.  The  model  then  tracks  the  changes  in 
attributes  over  time  to  determine  the  required  performance 
measures.  Simulations  suffer  from  several  shortcomings.  To 
accurately  model  the  system,  the  programs  must  be  complex 
resulting  in  a  significant  software  engineering  problem?  the 
model  must  be  carefully  designed  and  verified  to  ensure 
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proper  operation.  Because  of  tne  probabilistic  nature  of  tne 
system,  It  is  necessary  to  operate  the  simulation  for 
numerous  runs  ani  over  a  large  span  of  simuation  time  to 
ensure  statistically  meaningful  results.  This  can  lead  to 
significant  computing  costs  for  the  simulation.  Finally,  if 
tne  system  parameters  are  to  be  cnanged,  or  elements  of  tne 
system  altered,  it  is  necessary  to  change  the  simulation  and 
rerun  it.  Once  again,  tne  costs  of  software  modification  and 
model  operation  must  be  met.  This  can  mate  it  difficult  to 
generalize  or  abstract  from  the  simulation. 

An  alternative  to  simulation  modeling  is  analytic 
modeling.  In  this  method  the  system  is  expressed  as  a  set  of 
mathematical  equations.  Determining  tne  performance  measures 
for  the  system  amounts  to  finding  the  appropriate  solutions 
to  tne  system  equations.  Unfortunately,  in  many  cases  the 
solutions  are  mathematically  intractable  or  computationally 
inefficient  and  require  that  simplifying  assumptions  be  made 
about  the  system.  However,  to  quote  from  Kobayashi  and 
Konheim  once  again: 

"Even  when  a  decision  is  made  for  simulation,  an 
analytic  solution,  however  crude  it  may  be,  can  serve  as 
a  guideline  in  narrowing  down  a  range  of  system 
configurations  and  parameters  under  which  a  simulation 
runs.  It  also  could  save  a  considerable  amount  of 
modeling  efforts,  by  detecting  possible  errors 
Introduced  in  the  design  and  Implementation  phases  of  a 
simulation." 

This  thesis  investigates  an  approach  to  the  analytic 
modeling  of  computer  systems  based  on  using  a 
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graph-theoretic  technique  —  petrl  nets  —  as  a 
representation  for  system  elements  and  tneir  Interactions . 
By  analyzing  tne  structure  of  a  petrl  net  model,  It  Is 
possible  to  answer  a  number  of  questions  regarding  tne 
operation  of  tne  modeled  system.  We  snow  that  it  Is  possible 
to  model  tne  stocnastic  nature  of  computer  systems  by 
extending  tne  petrl  net  model  to  allow  nondeterminism  in  the 
net  to  be  expressed  In  terms  of  probability  distributions. 
It  Is  then  possible  to  consider  a  petrl  net  as  an  analog  to 
a  queueing  network  system  and  therefore  it  Is  possible  to 
apply  the  known  methods  of  Markov  analysis  to  tne  nets  to 
obtain  analytic  solutions  for  the  system.  The  problem  we 
address  in  tnis  thesis  is  the  evaluation  of  nondetermini stl c 
and  stochastic  petrl  nets  using  queueing  theory  techniques. 
Tne  solutions  which  result  combine  tne  structural  properties 
of  petrl  nets  with  tne  capability  for  performance 
prediction. 

A.  PETRI  NETS  AS  A  PERFORMANCE  MODEL 

Consider  a  simple  computer  system  consisting  of  two 
cooperating,  concurrent  processes  A  and  B  running  on 
separate  hardware.  Process  A  Is  a  producer,  and  process  B  is 
a  consumer  of  data.  It  Is  desired  that  a  nandsnake  protocol 
be  Implemented  between  the  two  processes  (see  Figure  1.1). 
How  might  this  be  represented? 


One  possibility  Is  to  list  the  events  which  must  occur 


during  tne  handshake  process.  Using  this  event  list,  we 
could  then  determine  what  conditions  must  be  satisfied  for 
each  event  to  occur,  and  wnat  cnanges  in  the  system  result 
from  that  occurrence.  This  could  be  graphically  displayed  In 
the  following  manner.  Let  the  events  be  represented  by  a 
bar,  and  tne  conditions  by  circles.  For  each  event,  draw  a 
directed  arc  from  each  circle  (condition)  which  must  hold 
for  the  event  to  occur  to  the  bar  (event).  Next,  draw  a 
directed  arc  from  the  bar  to  each  circle  (condition)  which 
holds  as  a  result  of  the  occurrence  of  the  event.  Finally, 
determine  tne  Initial  state  of  tne  system  by  deciding  which 
conditions  Initially  hold,  and  place  a  dot  (token)  In  a 
circle  for  each  holding  of  that  condition.  Tne  resulting 
graph  is  shown  In  Figure  1.2. 

This  graph  Is  called  the  petri  net  model  of  the 
communication  protocol,  after  C.  A.  Petri  who  first  studied 
them  In  the  1950's  [5] .  Note  that  each  event  may  have  one  or 
more  Input  conditions,  and  one  or  more  output  conditions.  In 
the  language  of  petri  nets,  the  events  are  called 
transitions  and  the  conditions  are  called  places ♦  The  net 
operates  by  moving  tokens  around  the  net  in  accordance  with 
the  firing  rule,  which  states  that  an  event  may  occur  when 
each  Input  place  to  the  event  nas  &  token  .assigned  to  It. 
The  transition  fires  by  removing  a  token  from  each  input 
place  and  depositing  one  in  each  output  place.  The  state  of 


PROCESS  A 


PROCESS  B 


send  to  ready  t0 

output  buffer  receive 


Figure  1.2  Petri  net  model  of  a  communication  protocol 


each  place  is  determined  by  the  number  of  tokens  in  it.  The 
system  state,  or  marking,  is  then  represented  by  a  vector 
whose  elements  are  the  state  of  each  place  in  the  net. 

One  feature  of  the  petri  net  model  is  that  the  tokens 
can  represent  either  control  flow  or  data  flow;  the 
difference  purely  lies  in  how  the  net  is  interpreted  by  the 
designer.  This  has  led  to  some  difficulty  in  modeling 
data-dependent  events.  Several  attempts  have  been  made  to 
overcome  this  problem  by  extending  the  definition  to  include 
specialized  places  such  as  conditional  places,  which  cause 
transitions  to  fire  in  different  ways  depending  on  whether 
or  not  the  condition  place  bolds  a  token.  In  either  case  tne 
token  content  of  tne  conditional  place  is  not  changed  by  the 
firing,  in  example  of  this  extension  is  tne  Macro  E-Net  Noe 
and  Nutt  have  proposed  [6].  In  a  slightly  different 
extension,  inhibitor  places  were  added  to  the  net  [7J  which 
prevent  firing  of  a  transition  when  the  place  nolds  a  token. 

A  second  feature  of  petri  nets  is  that  the  firing  of 
transitions  is  inherently  asynchronous  and  concurrent  —  for 
example  in  Figure  1.2  the  <process  data>  events  for  both 
processes  can  fire  independently  of  each  other.  When 
necessary,  the  operation  of  concurrent  processes  can  be 
coordinated  through  the  use  of  multiple  input  places;  the 
<receive  message>  event  is  an  example  of  this  type  of 
interaction. 
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The  basic  petri  net,  as  depicted  here,  does  not  attempt 
to  model  tne  time  required  for  execution.  Extensions  to  tne 
theory  which  account  for  execution  times  were  investigated 
b y  Ramchandanl  [8]  and  otners.  Tnis  technique  allows  for 
analysis  of  tne  time-related  operation  of  tne  net. 

1.  Analysis  of  petri  nets 

Petri  nets  may  be  analyzed  in  a  number  of  ways.  Mucn 
of  the  work,  particularly  at  MIT,  has  been  based  on  usine 
techniques  from  automata  theory  and  investigating  the  nets 
as  formal  language  generators  [9,  10J  .  Using  this  method, 
Hacir  has  proven  a  number  of  decidability  questions  about  the 
possible  configurations  (system  states)  of  the  net.  Other 
wort  [11,12,13]  has  emphasized  the  eraph  theoretical 
properties  of  the  nets  in  analyzing  their  structure.  This 
methodology  nas  led  to  tne  Identification  of  several 
subclasses  of  petri  nets  based  on  special  structural 
characteristics . 

Simulations  eased  on  petri  net  models  have  been  widely 
used  in  analyzing  hardware  designs  of  concurrent  systems  and 
data  flow  computing.  Typically,  the  system  to  be  modeled  is 
reduced  to  its  petri  net  equivalent  which  then  serves  as 
input  to  the  simulator.  The  simulator  then  executes  the 
petri  net  in  much  the  same  manner  as  a  conventional  discrete 
event  simulation. 
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Petri  nets  nave  been  used  to  model  a  large  number  of 
concurrent  software  and  nardware  systems.  In  hardware 
design,  they  nave  been  used  as  a  basis  for  developing  speed 
independent  logic  [14,15]  by  provine  the  conditions  for 
which  circuits  are  free  of  races  when  operating  in 
fundamental  mode.  More  ambitious  applications  have  involved 
the  analysis  of  multiprocessor  systems  such  as  the  CDC  6600 
[16,17J  ,  IBM  360/91  [18J  ,  Amdaal  470  ?/6  [17J  ,  and  US  Navy 
SEAFIRE  weapons  system  [19].  Most  of  these  applications  nave 
involved  simulation  modeling  due  to  tne  complexity  of  the 
designs.  1  slightly  different  approach  to  hardware  design 
has  been  the  design  by  step-wise  refinement  metnod.  Valette 
[2«]  nas  shown  that  single  transitions  could  be  replaced  by 
more  complex  structures  wnen  certain  conditions  were  met. 
Using  this  method,  each  component  of  the  system  can  be 
separately  analyzed  and  formed  into  an  independent  structure 
he  called  a  well-formed  blocit.  By  substituting  tnese  bloctcs 
for  transitions  in  tne  net.  It  is  possible  to  retain  tne 
properties  of  the  original  net.  This  hierarchical  structure 
also  simplifies  the  problem  of  understanding  the  operation 
of  the  net.  Figure  1.3  shows  how  this  might  be  accomplished. 

Petri  net  models  have  been  used  in  the  analysis  of 
software  desirns  as  well.  For  example,  they  nave  been  used 
to  verify  the  correctness  of  communication  protocols  [21]  . 
Operating  system  synchronization  primatives  such  as  P  and  7 
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[22]  may  be  modeled  using  simple  net  structures.  Figure  1.4 
gives  an  example  of  now  mutual  exclusion  could  be 
represented.  The  contents  of  place  S  Is  the  semapnore  value 
for  the  protected  resource  (In  this  case  1).  Each  process 
wnlch  requires  exclusive  use  of  tne  resource  nas  an  event 
P(S)  which  may  fire  only  if  the  semaphore  is  non-tero. 
Firing  of  tne  corresponding  V(S)  event  returns  tne  toten  to 
the  semaphore.  The  significant  advantage  of  using  a  petri 
net  Is  that  mutual  exclusion  can  he  proven  by  showing  that 
only  one  P(S)  event  can  be  fired  until  tne  corresponding 
V (S )  event  occurs . 

Lest  the  reader  get  the  Impression  that  petri  nets  are 
the  ultimate  modeling  tool.  It  should  be  noted  that  petri 
nets  have  limitations  in  tneir  modeling  ability.  Tne  lack  of 
a  mechanism  for  handling  data  dependent  events  as  described 
earlier  nas  made  it  difficult  to  model  actual  systems  using 
deterministic  nets.  A  second  related  limitation  is  the  use 
of  deterministic  transition  firing  times  In  the  analysis  cf 
timed  nets.  In  our  opinion,  the  restriction  of  petri  nets  to 
deterministic  modeling  has  been  responsible  for  the  lach  of 
attention  given  to  them  in  recent  years. 

Our  view  of  petri  nets  emphasises  the  non-determinlstic 
modeling  capabilities  of  the  nets.  We  consider  the 
transitions  In  the  net  to  be  service  centers  which  operate 
according  to  some  service  time  distribution.  In  this 
approach,  the  places  can  represent  queues  of  tonens  awaiting 
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service.  By  regarding  nets  In  tnls  manner,  tne  Known  results 
of  queueing  network  tneory  may  be  applied  to  tne  analysis 
while  maintaining  the  benefits  of  tne  underlying  structure 
of  tne  nets.  We  feel  tnat  tnls  will  result  in  a  better 
modeling  tool  for  analyzing  concurrent  systems. 

B.  REVIEW  OF  RELATED  WORK 

The  basis  for  concurrent  system  modeling  has  largely 
been  derived  fron  two  papers  by  Karp  and  Miller  [24,25] . 
These  papers  proposed  several  models  for  concurrent  systems. 
Computation  graphs  are  simular  to  petri  nets  except  tnat 
places  were  modeled  as  directed  arcs  between  events  and 
labeled  with  a  four-tuple  defined  as: 

A  —  tne  Initial  number  of  words  in  a  FIFO  queue 
0  —  the  number  of  words  added  to  tne  queue  as  a  result 
of  tne  firing  of  tne  Input  transition 

W  —  the  number  of  words  removed  from  tne  queue  as  a 
result  of  the  firing  of  the  output  transition 

T  —  a  threshold  number  of  words  (perhaps  greater  than 
W)  required  for  the  output  transition  to  fire. 

Karp  and  Miller  established  the  requirements  for  several 
Important  concepts  including  liveness  and  boundedness  wnicn 
we  discuss  In  greater  detail  later. 

Reiter  [26]  extended  computation  graphs  by  adding  a 
fifth  element  tau  to  the  directed  arc  labeling  which 
represented  the  execution  time  required  for  the  output 
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transition  to  process  tne  W  data  words  waen  firing.  Reiter 
tnen  determined  a  metnod  for  finding  possible  sequences  of 
firings  of  transitions.  For  cyclic  graphs,  he  found  a  lower 
bound  for  tne  cycle  period  of  tne  graph.  Computation  graphs 
have  been  used  in  the  performance  analysis  of  data  flow 
processors  [27] . 

The  second  paper  by  Karp  and  Miller  [25]  investigated 
parallel  program  schemata  ana  vector  addition  systems.  A 
parallel  program  scnema  modeled  parallelism  in  programs  by 
establishing  computation  states  and  rules  for  state 
transitions.  Tne  concept  of  FORK  and  JOIN  wnich  nave  been 
applied  to  data  flow  and  other  MlMD  architectures  was 
developed  to  express  the  creation  of  concurrent  processes 
from  a  sequential  process,  and  the  combination  of  concurrent 
processes  into  a  sequential  process.  The  equivalence  of 
petrl  nets,  computation  graphs,  and  parallel  program 
schemata  was  shown  by  Miller  [28] . 

Most  of  the  research  on  petri  nets  in  tne  United  States 
has  been  conducted  at  MIT.  Commoner  and  Bolt  [11,12]  studied 
a  deterministic  subclass  of  petri  nets  Known  as  marked 
graphs  and  proved  several  tneorems  regarding  tneir  system 
state  spaces.  A  more  general  subclass  of  deterministic  nets, 
persistent  nets,  was  studied  by  landweoer  and  Robertson  [13J 
who  proved  that  the  theorems  regarding  marked  graphs  were 
applicable  to  this  class.  A  final  deterministic  subclass 
referred  to  as  state  machine  decomposable  was  investigated 
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by  Ramchandanl .  In  addition,  Ramcnanlanl  analyzed  tills 
subclass  with  deterministic  transition  firing  times  to 
derive  expressions  for  tne  minimum  net  cycle  period  In  a 
manner  analogous  to  mat  Reiter  used  for  computation  graphs. 

Other  classes  of  petri  nets  nave  been  defined  which 
Improve  tne  tractability  of  tne  problem  of  finding  solutions 
to  performance  measures  while  retaining  characteristics 
which  are  desired  in  the  modeled  systems.  In  particular, 
live,  bounded,  conservative,  and  consistent  nets  nave 
received  the  most  attention.  The  properties  of  tnese  classes 
will  be  examined  in  detail  in  tne  next  section. 

Our  worn  extends  this  previous  wort  by  focusing  on  the 
broader  class  of  nondeterministlc,  consistent  petri  nets 
which  appears  to  be  the  most  general  class  for  which 
solutions  to  performance  questions  may  be  found.  While 
nondeterminism  Increases  the  difficulty  of  dealing  with 
petri  nets  analytically,  much  of  the  previous  worfc  on  petri 
net  structure  remains  pertinent  to  tnis  class. 
Nondeterminism  allows  tne  net  to  represent  different  types 
of  data,  for  example,  by  regarding  tne  data  type  or 
transition  firing  time  as  a  random  variable.  To  analyze  the 
performance  of  nondeterministlc  petri  nets,  we  consider  tnem 
as  analogs  to  queueing  network  models.  The  basis  for 
analysis  of  these  models  is  the  classic  wors  of  Jaclcson  [29] 
for  tne  case  of  open  systems,  and  Gordon  and  Newell  [30]  for 
closed  systems.  Both  of  these  models  relied  upon  polsson 
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arrival  processes,  first  come,  first  serve  (FCFS)  queueing 
discipline,  and  exponential  service  departure  processes  to 
ensure  tnat  tae  Marxov  property  was  met  and  allowed  tbe 
system  state  probabilities  to  be  expressed  as  the  product  of 
tne  marginal  state  probabilities.  This  quality  is  Known  as 
the  product  form  solution  and  is  required  for 
computationally  efficient  solutions.  Most  of  the  recent  woric 
in  queuing  network  theory  nas  attempted  to  find  product  form 
solutions  for  more  general  systems.  Jacfcson  131]  considered 
systems  wnere  tne  arrival  rates  and  service  rates  were 
functions  of  the  queue  lengths  (states)  at  the  various 
nodes.  Bastett  et  al.  [32]  extended  this  to  open  and  closed 
networks  where  customers  were  of  different  classes  and  tne 
queueing  discipline  was  FCFS,  no  queueing,  and  last  come, 
first  serve  with  preemptive  resume  (LCFS-PR).  ill  tnese 
cases  were  shown  to  have  product  form  solutions.  In 
addition,  they  showed  that  a  condition  Known  as  local 
balance  was  a  necessary  condition  for  product  form 
solutions . 

Chandy  et  al.  [33]  considered  the  question  of  local 
balance  in  more  detail  and  developed  the  more  general  notion 
of  station  balance  which  was  also  snown  to  be  necessary  and 
sufficient  for  product  form  solutions  if  non-exponential 
differentiable  service  distributions  were  used.  In  addition 
they  proved  that  arbitrary  service  distributions  satisfied 
station  balance  if  processor  sharing  (PS)  or  LCFS-FR 
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disciplines  were  used.  In  tne  case  of  exponential  service 
tine  distributions  for  all  service  classes,  tney  showed  that 
FCFS  and  priority  disciplines  resulted  in  station  balance 
being  met.  This  result  has  been  eitended  to  any  worh 
conserving  discipline. 

In  summary,  it  has  been  shown  that  product  form 
solutions  exist  for  queueing  networks  with  tne  following 
properties: 

1.  For  exponential  service,  any  wort  conserving  queueing 
discipline  may  be  used. 

2.  For  PS  and  LCFS-PR  disciplines,  any  differentiable 
service  distribution  may  be  used. 

3.  Tne  solutions  do  not  depend  on  tne  routing  used  for 
the  customers. 

C.  OUTLINE  OF  SUCCEEDING  SECTIONS 

In  Section  II,  we  present  the  formal  definitions  of 
petri  nets  and  derive  several  useful  properties.  The  state 
space  —  the  set  of  system  states  the  net  may  occupy  —  is 
determined  by  constructing  the  reachability  set  of  the  petri 
net.  The  conditions  under  which  the  state  space  is  finite 
and  recurrent  are  then  considered.  It  is  shown  that  nets 
with  certain  structural  cnaracteri sties  give  rise  to  tnese 
restricted  state  spaces.  In  particular,  the  classes  of 
marked  graphs,  state  machines,  and  consistent  nets  are 
considered  because  of  their  relation  to  realizable  systems. 
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In  Section  III  we  turn  to  nets  vitn  timed  events.  Toe 


case  of  deterministic  routine  and  transition  time  is  first 
considered.  Next,  tne  (probabilistic)  class  of  state 
machines  with  nondeterminlstlc  routine  and  exponential 
transition  times  Is  examined.  It  is  shown  that  for  the  class 
of  state  machine  decomposable  nets  it  is  possible  to 
transform  tne  net  Into  a  stochastic  equivalent  net  which  is 
analogous  to  a  closed  queueing  network.  For  this  class  of 
nets  a  product  form  solution  for  the  state  probabilities  is 
derived. 

Next,  petrl  nets  which  allow  external  sinks  and  sources 
are  defined.  Again,  it  is  snown  tnat  tne  stocnastlc 
equivalent  nets  may  be  analyzed  as  queueing  networks;  In 
tnis  case  an  open  system. 

Finally,  the  class  of  consistent  petrl  nets  with 
exponential  firing  times  is  considered  and  it  Is  shown  that 
product  form  does  not  exist  for  this  class  of  nets. 


II.  PETRI  NET  THEORY 
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In  tnis  section  tne  relevant  petri  net  tneory  is  f 

I 

presented.  Much  of  the  worn  follows  tnat  of  Commoner  and  ' 

Holt  [11].  Kraft  and  Miller  125],  and  Ramcaandanl  [6] .  Tne 
notation  used  is  primarily  tnat  of  Peterson  [23] . 

The  petri  net  was  defined  informally  in  the  preceding 
section  as  a  means  for  representing  related  events  and  tneir 
conditions  in  systems,  We  now  formalize  this  notion  by 
defining  tne  petri  net  N  and  its  directed  graph  i 

representation.  j 

Definition  2.1  N  =  <PfT,I,0> 
where 

*  *  {p i  I  Pi  is  a  place  in  tne  net}  j 

T  *  {tj  i  t;  is  a  ^jj^itlon  in  tne  net> 

I  :  (P^T)  — such  tnat  if  pt  is  an  input  place 
to  tj  .  I ( p; , tj  )  ^  l  and  0  otnerwise 
0  :  (P^T)  — >N  such  tnat  if  p^  is  an  output  place 
to  t j  •  0(pt',ty)  2l  1  and  0  otherwise 
wlta  tne  requirement  that  €  T  3Pj  »PH  €  P  I 

1  ( Py  •  ^  0  A  0(pjc.ti  )  i  0  and  Vpy  £P  j 

I  ( Py  , tt-  )  >  0  »*>  0(pj  ,  t^)  *  0 

1 

We  furtner  define  tne  following  sets: 

•H  a  iP;  I  Up;  •*;)  > 

j, 

i 
\ 
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t i*  »  (Pj  i  0(pj  ,ti)  >  0>  wnere  i£  €  T  /\  P f€  P 

and  likewise: 

#pj  =  (t£  !  0 ( p j  ,t^)  >  43} 

pj»  *  {tt'  !  I(p j  ,  tt  )  >  0}  where  tt-  €  T  A  Pj  €  P 

These  sets  are  referred  to  as  toe  input  and  output  sets, 

respectively.  Note  t&at  the  definitions  of  tne  functions  I 
and  0  require  that: 

Vt£  €  t,  «tt*  £  <p  A  *£•  *  <P  A  *tt'  U  *0 

The  set  of  places  represents  tae  conditions  In  our  informal 

model,  and  the  set  of  transitions  represents  tne  events.  Tne 
input  and  output  functions  specify  the  preconditions  for  an 
event  to  occur  and  the  results  of  tne  event  occurrence. 

Corresponding  to  each  petrl  net  we  define  a  bipartite, 
directed  grapn  as  follows: 

Vp4*  Pi  €  P  a  circle  representing  a  place 

Vt£  t£  €  T  draw  a  vertical  bar  representing  a  transition 

Vt;  ,p j  If  pj  €  draw  a  directed  arc  from  pj  to 

Vtt-  ,p j  If  p j£ii»  draw  a  directed  arc  from  t*  to  pj 
Me  will  use  tne  notions  of  petrl  net  and  petri  net  graph 
interchanglbly  (since  they  are  equivalent). 


Example  1. 

Consider  the  following  petri  net  N  =  <P,T,I,0>  with 
P  *  {  P,  »  P* .  P,  t  P*  f  Pr  *  P*  *  P7  > 

T  *  {  t,  ,  tjj  ,  t  J  ,  t^  ,  t  £  } 

let  n  ■  [pj  and  m  *  {t^  .  Then  I  and  0  may  be 


represented  ay  tne  n  X  m  incidence  matrices: 
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where  ;,j  *  Kp^-.t;) 

and  C0  «•  tj  *  0  ( pt-  ,  tj  ) 

Tae  corresponding  petri  net  grapa  is  shown  in  Figure  2.1. 

If  ve  associate  vita  eaca  place  in  a  petri  net  n  a 

non-negative  Integer  marking  function  fx  ,  we  nave  tae 

following  definition  of  a  marked  petri  net  M: 

Definition  2.2  &  marked  petri  net  M  =  <P,T,1 ,0,  JLL> 

waere  P.r.1,0  are  defined  as  before  and 
jLL:  P  —  >N 

Each  function  defines  a  marking  of  tae  net.  In  graph 

notation  the  petri  net  eraph  is  extended  to  a  marked  petri 

net  graph  by  aiding  tokens  to  places  as  follows: 

Vpt"  (•  p*  /J#K(p 4  )  =  n  tnen  place  n  tokens  (dots)  on 

place  pt* . 

Figure  2.2  snows  a  possible  marking  for  tne  petri  net  of 
Example  1.  Clearly  a  (countably)  infinite  number  of  possible 
markings  exist  for  any  petri  net.  Tais  marking  represents 
the  (possibly  multiple)  boldines  of  conditions  at 
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some  Instant  of  execution  and  may  be  viewed  as  a  description 
of  the  state  of  tne  net. 


Definition  2.3  A  transition  t  Is  enabled  Iff 

Vp j  Pj  €  *“>  J-l(py)  ^  I(Pj.t£) 

For  eacn  marking  jllk  we  can  define  tne  enabling  set  SK  as 
follows : 

Definition  2.4  Tne  enabling  set  SfclC  T  =  l t£  !  t;  is 
enabled  by  marking  jLL^K 

In  our  grapn  notation,  a  transition  is  enabled  if  eacn  arc 
directed  into  tne  transition  bas  a  token  in  its  originating 
place.  Referring  to  Figure  2.2,  it  will  be  seen  tnat  t,»  tt, 
and  t*  are  enabled  and  tnerefore  *  {t,  ,  t£,  t^,  }. 

Transition  tg  is  not  enabled  since  tnere  is  no  token  in 
place  pj.  corresponding  to  tne  arc  p^  — >  1 3. 

An  enabled  transition  may  fire  to  create  a  new  marking. 
Tnat  is,  we  define  a  function: 

Definition  2.5  A  firing  function  for  a  marked  net  M  Is 
F  :jul  Xs  — >  fX  sucn  tnat  F(|i,„£ Pj ) , t^-)  =  jLL^Pj)  - 
Up j  .tj)  ♦  0(p;,t i  )  *  ^LK4, 
where  pj  €  P  A  tt-^Sv 

F  is  defined  for  all  markings  for  wnicn  tne  set  SK  is 
non-empty.  Continuing  with  the  vector  notation  introduced 
earlier  for  tne  functions  I  and  0,  we  may  denote  eacn 
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markin*  jjL*  as  an  n-element  vector  U*  where  n  =  |  pj  and 

UK(1)  =  |jlK  (p i)  for  1  *  l,2,...,n  .  Tnen  F  may  be  expressed 

as : 

F ( 1 14* )  *  Ok  “  Cji  +  C0i  vnere  Cj  i  and  C0«I  are  tne  ith 
columns  of  tne  input  and  output  incidence  matrices 
respectively. 


Definition  2.6  Margin?  is  directly  reacnabie  fromjjL^if 
(tt*  €Sk)  A  F(^jL^ ti  )  *fljf  and  is  denoted  as: 


Returning  to  our  earlier  example,  transition  t2  may  be  fired 
(recall  tnat  tne  enabling  set  Sk  *  It,  ,  tK,  t*  }  ).  Ey 
inspection  of  Figure  2.2,  *e  specify  tne  vector  for  marking 
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Tne  resulting  marking  fjLK„ 


Jk.i 


°k  **  C^a  ♦  Cqz. 
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In  grapn  notation,  one  token  is  removed  from  eacn  place 
having  an  arc  directed  into  tne  firing  transition,  and  one 
token  is  added  to  eacn  place  navlng  an  arc  directed  from  tne 
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firing  transition.  Tne  resulting  marxing  Is  shown  In  Figure 
2.3. 

Next  we  consider  sequences  of  transition  firings.  Assume 
tne  following  firings  exist  for  some  marked  net  M : 

Tnen  we  denote 

or  vS>)±z 

where  tne  firing  sequence  oris  some  sequence  of  transition 
firings  ( tj  ,tg,...,tn). 

Definition  2.7  Marking  Is  reachable  from  marlring  Iff 

3  O’’  *^M*k«*  =>  •  •  •  ®  > M-/ 

wnere  (T*  (t, 

If  we  form  the  reflexive,  transitive  closure  of  tne 
transition  firing  relation  we  nave  tne  following  definition: 

Definition  2.8  Slven  a  marxed  net  M,  the  reachability  set 
Q(M)  Is  defined  Inductively  as: 
basis:  JUL0  €  Q 

ti 

Induction: /JLte  €  qA  3v  €  T  !  fJLk‘>fJL^  -s>  fX*,,  €  0 

We  are  Interested  In  determining  the  elements  of  the  set 
0(i).  To  do  so,  we  must  first  formalize  tne  previously 
Introduced  vector  notation  as  a  vector  addition  system. 
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A.  VECTOR  ADDITION  SYSTEMS 


The  concept  of  vector  addition  systems  was  first 
explored  by  Karp  and  Miller  [25J .  This  section  is  largely 
derived  from  their  wore. 

A  vector  addition  system  is  defined  as  a  pair  V  =  (d,W) 
where  d  is  an  r-dlmensional  vector  with  and  W  Is  a 

finite  set  of  r-dimensional  vectors  w,  ,  wa . w„  with 

Wj(i)€I.  The  reacnability  set  R(V)  for  a  vector  addition 
system  is  the  set  of  vectors  composed  by  adding  elements  of 
tne  set  V  to  d.  mat  is 

R(V)  *  (x  !  x  =  d  +  (w,  ♦  w4  +  ...  +  w*  )  A  x(i)^0  }. 
In  addition,  tne  following  terminology  is  used: 

The  relation  Jfa  is  defined  as 
x  <  7  <=>  for  1  *  1,2,... ,r  x(l)  ^  y(i) 

The  symbol  Gjis  defined  such  that  if  n  is  any  integer, 

GJ  >  n  and  n  +  GJ  =CJ. 

The  reachability  set  R ( F )  can  be  determined  by  constructing 
tne  corresponding  reachability  tree  T(7).  Nodes  in  tne  tree 
consist  of  r-dimensional  vectors  x,y,z,...  with 
x(i)€H  UtCJ},  for  1  *  1,2,  ...,r  .  The  relation  •<  is  defined 
as  i  «<  y  <=>  a  directed  path  exists  from  x  to  y  in  T(V).  Let 
d  be  the  root  of  the  tree.  Descendants  are  constructed 
recursively  as  follows: 

1.  If  x  •<  y  and  x  ■  y,  y  is  a  leaf  node. 

2.  Otherwise,  construct  successor  nodes  to  y  with 

vectors  y  ♦  w,  ,  y  +  ws ,  ...  ,  y  +  w^  where  for  i  = 


1,2,.  ..,r  y(i)  +  wj(l)^0.  In  addition,  if  there  exists 
a  node  z  sued  that  z  •<  y  and  z^.y  ♦  wi  and  z(J)  < 
y(J)  +  wt*( J)  for  some  J,  tnen  y(j)  +  w^(j)  *GJ. 

To  Illustrate  the  construction  of  this  tree  consider  the 
following  example  from  [25J : 

Example  2. 

Let  ?  *  (d,W)  wnere 
d  =  [1,0, 0,0,0] 

W  »  {  [-1,1, 0,0,0]  ,  [-1,0,0,1,0J  ,  [0 ,-l ,2, 0 ,0j  , 
[0,1, -1,0,0]  ,  [0,0, 0,-1, 2]  ,  [0,0,0, 1,-1]  > 
Tne  resulting  reachability  tree  is  shown  in  Figure  2.4. 

The  following  theorems  from  [25]  allow  us  to  answer 
decidability  questions  about  rector  addition  systems  by 
inspecting  the  reachability  tree. 

Theorem  2.1 

Vi3y  !  y  €  R(f )  A  y)  <=>  z  !  z  €  t(v)  A  (x  <  z) 

The  proof,  while  straight  foward,  is  rather  lengthy  and  so 
is  not  included  here,  but  may  be  found  in  [25]. 

Theorem  2.2  For  any  vector  addition  system  V,  T(¥)  Is 
finite. 

We  first  show  the  following  two  lemmas: 


1) - (0,0, 2, 0,0) - (0 
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Lemma  2.2.1 

Let  p,  ,p„*ps,  ...,p„,  ...  be  an  infinite  sequence  of 
elements  of  ( Jvf  Uk*J)  *  Then  there  exists  an  infinite 
subsequence  P* *Pi *Pc  ♦  • •  •  *P*  ♦  •  •  •  sucn  tnat 

P*i»  •  •  Pi^»*  •  *  • 

Proof.  Construct  an  infinite  subsequence  by  selecting 
elements  with  first  entries  nondecreasing.  From  tnis 
sequence,  construct  an  infinite  subsequence  with  second 
entries  nondecreasing,  and  so  on. 

Lemma  2.2.2  (K'dnig  Infinity  Lemma)  Let  T  be  a  tree  such 
tnat  each  vertex  nas  a  finite  number  of  successors  and 
there  exists  no  infinite  directed  path  from  the  root. 
Then  T  is  finite. 

Proof.  Since  eacn  vertex  nas  a  finite  number  of 
successors,  let  n  be  the  maiimum  number  of  successors 
for  any  node.  Then  tnere  are  at  most  n  paths  of  length  1 
from  the  root,  and  if  p  is  some  node  in  the  tree,  there 
are  at  most  n  paths  of  length  1  in  the  subtree  having  p 
as  its  root.  Since  no  infinite  patn  exists  by 
assumption,  let  m  be  tne  maximum  path  length.  Then  the 
maximum  number  of  nodes  is  n"1  and  T  is  finite. 

Proof  of  theorem  2.2. 

Assume  there  exists  an  infinite  directed  path  from  the 
root  of  T(7)  with  node  sequence  p, ,pt,ps, . . . ,pn, . . . 
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Then  by 


lemma  2.2.1,  tnere  exists  a  subsequence 


P,  » P4  *  Pt  *  •  • .  *  p*  •  •  •  •  wi  tn  p^<  pfc<_  Pt<.  •  •  •  P*^L  •  •  •  •  By 

definition,  if  p« *  pt  tnen  pb  is  a  leaf  node  and 

therefore  the  inequality  is  strict  and 
P*  <P*  <pc...<ps  <•••  •  Again  by  definition,  since 

P*  <P*»  Pk  must  have  one  more  entry  equal  to  GJ  than  p*. 
Since  toe  number  of  entries  is  finite,  this  is 

impossible  and  tnerefore  no  sucn  infinite  directed  patn 
exists.  By  lemma  2.2.2,  T(V)  is  finite. 

Using  these  theorems,  it  is  possible  to  prove  tne  following 
decidability  theorems  about  the  reachability  set  R ( V ) : 

Theorem  2.3  Given  some  finite  n , 

Vi  x  €  R(7)  A  (x(i)^  n)  is  decidable. 

Proof.  Construct  T(V).  By  tneorem  2.2  T(V)  is  finite. 

Therefore  Vy  y  € T( 1 )  /\iy( i n)  is  decidable.  By  theorem 
2.1  then,  the  question  is  decidable  for  R(V). 

Theorem  2.4  Given  some  subset  of  the  entries  for  tne 
r-  dimensional  vector  addition  system  G£U,2,...r>, 

Vc  leN"  3y  y  €  R(* )  A  (Vi  i  €  0)  . 

y(l)  ^x(l)  is  decidable. 

Proof.  By  tae  definition  of  T(T),  tnis  property  noids  iff 
there  exists  a  leaf  node  z  such  that  Vi  i£@  *(i)  =  CJ  . 
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Theorem  2.5  Given  a  vector  addition  system  R(V),  it  is 
decidable  wnetner  R(V)  is  finite. 

This  result  follows  directly  from  theorem  2.4. 

Theorem  2.6  Given  two  vector  addition  systems  V  and  1', 
R(7)J=»  R(F')  is  undecida ble. 

Rabin's  proof  for  this  result  appears  in  Balter  [34j . 

It  should  be  noted  that  tne  general  reachability  problem 
i.e.,  given  i^]v|ris  x€R(7),  is  not  determined  by  the 
reachability  tree.  However,  an  algorithm  for  solving  the 


reachability 

problem  has 

been 

found  [35] . 

Therefore , 

the 

reachability 

problem 

is 

decidable 

(although 

the 

computational 

complexity 

is  not 

known) . 

This  completes  our  study  of 

vector  addition  systems. 

tfe 

next  demonstrate  the  correspondence  between  vector  addition 
systems  and  marked  petri  nets.  Let  M  *  <P,T,I,OtJJ>  be  an 
arbitrary  marked  petri  net.  The  corresponding  vector 
addition  system  V(d,W)  may  then  be  constructed  in  the 
following  manner: 

let  the  dimension  r  =  Jp{ 

let  d  *|LL,  wnerejLL,  is  an  Initial  marking  for  M 
let  W  *  {wK|  t<  €  T,pj  €  P  w,.  ( J)  =  0(pj  ,tt- }  -  I(p;  ,  tt- )  > 
Note  that  jvj  *  J  t|  and  that  elements  of  V  reflect  tne  net 
change  in  marking  resulting  from  the  firing  of  a  transition 
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ia  M.  This  leads  to  tae  following  taeorem  relating  tne 
reachability  sets  of  M  and  7: 

Theorem  2.7  Q(M)  *  R(7) 

Proof.  1).  Q(M).=?R(7).  Let  x€R(M).  Then 

,*>x  .  By  definition  of  *  k* 

F(/JL»t(-)  =  jLL+  wfc  and  substituting  for  t,  ,  ta,  t3  ♦  .... 
t*  in  the  firing  sequence  (J.+  w,  *■  w*  *  . . . w„  *  x 

Since /jL**  d  by  definition.  x£R(7)  . 

ii).  Q(M)£=R(7).  Let  x  €R(V).  Then 

x  »  d  ♦  v,  +  ♦  ...  w*  .By  the  same  reasoning  as  case 

1 .  ...  x  . 

Using  theorem  2.7  and  tae  results  for  vector  addition 
systems  we  state  the  following: 

Tneorem  2.8  Slven  a  marked  petri  net  M  witn  initial 

marking^  ,  it  is  decidable  if  the  reachability  set  Q(M) 
is  finite. 

Theorem  2.9  3iven  a  marked  petri  net  M  with  initial 
marking  jjl*  ,  it  is  decidable  if  there  exists  kfcjvj,  such 
that  for  all  elements  of  the  reachability  set  Q(M) » 
each  entry  jUL(  i  )S  k. 

Definition  2.9  A  marked  petri  net  M  is  k-bounded  iff 

3k  !  V)jL  =»>jj.(i)^sk  . 
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Fleure  2.5.  Reachability  tree  for  Example  1 
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Definition  2.10  A  marked  petrl  net  M  Is  safe  Iff  It  Is 
k-bounded  with  k  *  1  . 

We  complete  tnis  section  by  once  again  considering  Example 
1.  Define  tne  corresponding  vector  addition  system: 

7  «=  (dfW)  with  d  »  [2,1, 1,0,0, 0,0J  as  indicated  by 
Fieure  2.2. 

W  *  {  [-1,0, 0,1, 0,0,0]  ,  [-1,-1, 0,1, 1,0,0]  , 

[0,1, -1,0, -1,1,0]  ,  [0,0, -1,0, 0,0,1]  , 

[0,0, 1,0,0, 0,-1]  } 

Next,  construct  tne  correspondine  reachability  tree  T(7). 
Tne  tree  is  snown  in  Figure  2.5.  By  inspection,  tne 
reachability  set  R(V)  is  determined  to  be: 

{  [2, 1,1, 0,0, 0,0]  ,  [1,1, 1,1, 0,0,0]  ,  [1,0, 1,1, 1,0,0]  , 

[2, 1,0,0 ,0,0,1]  ,  [0 , 1 , 1 , 2 , 0 , 0 , 0]  ,  [0 , 0 , 1 , 2 , 1 , 0 , 0 ]  , 

[1,1, 0,1, 0,0,1]  ,  [1,1, 0,1, 0,1,0]  ,  [1,0, 0,1, 1,0,1]  , 

[0,1, 0,2, 0,0,1]  ,  [0,0, 0,2, 1,0,1]  ,  [0,1, 0,2, 0,1,0]  , 

[0,0, 0,2, 1,1,0]  } 

This  (finite)  set  is  also  0(M)  and  therefore  M  is  k-bounded 
with  k  *  2. 

B.  SUBCLASSES  OF  MARKED  PETRI  NETS 

The  nets  investigated  in  tne  preceding  parts  of  this 
section  are  more  properly  referred  to  as  generalized  petri 
nets.  Analysis  of  generalized  nets  has  proved  to  be  somewhat 
intractable.  As  a  result,  several  properties  of  petrl  nets 
have  been  studied  which  define  subclasses  of  the  generalized 
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nets.  These  restrictions  appear  to  be  justified  in  that  many 
(if  not  most)  actual  systems  may  be  modeled  by  the 
restricted  nets. 

Definition  2.11  A  transition  t  T  is  live  for  markingjj^ 
iff 

Vfi. At;  6 

where  Sk  is  the  enabling  set  forjLl*. 

If  a  transition  is  live,  a  firing  sequence  may  always  be 
found  which  will  allow  it  to  be  fired  indefinitely  often. 

Definition  2.12  A  marked  petri  net  ti  Is  live  iff 
Vt  t€T  ~>  t  is  live  for  marking  jll. 

In  systems,  liveness  is  often  associated  with  the  problem  of 
deadlock.  Hack  [36]  has  shown  that  liveness  is  equivalent  to 
the  reachability  problem;  therefore,  it  is  decidable. 

Definition  2.13  A  place  pt- €  P  is  conflict  free  iff 

V/u Lk  t,  ,  ts,  •  •  • »  t^  €  A  1  ('  €  s* 

3/  3  *  i  A  ty  €  sK 

for  any  marking,  a  conflict  free  place  may  not  enable  more 
than  one  transition.  In  Figure  2.6,  place  p,  is  not  conflict 
free  since  both  t,  and  t2  are  enabled. 

Definition  2.14  A  petri  net  M  is  conflict  free  iff 
Vp  p  €P  **>  p  is  conflict  free. 
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A  stronger  statement  concerning  places  is  the  following: 
Definition  2.15  A  place  p  is  decision  free,  iff 

K(  -  |*-|  =  1  • 

Definition  2.15  A  marked  petri  net  M  is  a  marked  graph  iff 
Vp  P  *=>  P  is  decision  free. 

A  final  property  of  petri  nets  may  be  defined: 

Definition  2.17  A  ma rking  fj.K  is  persistent  iff 

V/jit€s  A  ( iXf>fjLx)  *=>  tss^  v  tecr* 

A  persistent  marking  is  one  in  wnicn  an  enabled  transition 
remains  enabled  until  it  is  fired. 

Definition  2.18  A  petri  net  M  is  persistent  iff 
Vt  t  €T  **>  t  is  persistent  forjui*. 

Tne  question  of  persistence  is  important  in  tne  analysis  of 
petri  nets  and  therefore  we  present  a  decidability  theorem 
for  these  nets: 

Theorem  2.10  Given  a  k-bounded,  marked  petri  net  M,  it  is 
decidable  whetner  M  is  persistent. 

Proof.  Since  M  is  k-bounded,  its  reachability  set  Q(M)  is 
finite.  For  each 6  0  construct  the  enabling  set  Sk. 
Tor  eacn  t£  €  SH  determine  Sh,(  where  p.K=>/Ltk41  .  If  Sh,( 
2sk  -  i 1 >  ,  M  is  persistent. 


47 


! 

Note  mat  all  conflict  free  nets  (and  tnerefore  all  marked 
graphs)  are  persistent.  We  next  consider  some  aspects  of  the 
petrl  net  classes  navlng  these  properties. 

1.  Marked  Graphs 

Marsel  graphs  nave  heen  extensively  studied  by 
Commoner  and  Holt,  among  others  [11,12].  Here  we  present 
some  pertinent  results  of  tnelr  wore. 

Recall  from  graph  theory  the  following  three 
definitions: 

Definition  2.19  Let  D  *  <A,R>  be  a  digraph  with  nodes  a 
and  b.  A  .directed  patn  from  a  to  b  is  a  finite  sequence 

of  nodes  P  *  (c9,c,,....cj  such  that  ce  *  a,  c^  =  b, 
and  for  all  c(-  with  ftSali'SsLn  ctRct<>l  .  If  a  =  b,  P  is  a 
directed  circuit. 

Definition  2.20  A  digraph  D  =  <A,R>  is  strongly  connected 
If  for  every  two  nodes  a,b£A,  tnere  Is  a  directed  path 
from  a  to  b  and  b  to  a.  If  there  is  an  undirected  path 
from  a  to  b,  D  Is  connected. 

Definition  2.21  A  component  of  a  digraph  D  is  a  connected 
subdigraph  of  D  which  is  not  a  proper  subdigraph  of  any 
connected  subdigraph  of  D. 

The  constraint  on  the  input  and  output  transitions  to  a 
place  mages  it  possible  to  replace  every  place  with  a  single 
directed  arc  between  its  input  and  output  transitions.  In 
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this  way  the  petrl  net  reduces  to  a  digraph  simplifying 
analysis.  The  marked  graph  may  then  be  more  simply  defined 
as: 


Definition  2.22  A  marked  graph  M'  *  <T '  ,S'  ,jjf>  is  a 
three-tuple  where 


T'  »  T 

E'  :  TXT  — >  {0,1} 
where  E(tv  ,tj)  * 
jlxT  :  E'  — where 


if  3p  o(p,t *) 

A  I  (  P  y  t  J  )  =  1 
otherwise 


*  1 


.Here  etj€*  A  .p„  4  it;)  A  p„*  •  itj> 

(Here  we  have  synonymously  defined  the  edge  set 
E'  »  {e<-j}  where  the  edge  directed  from  node  i  to 


node  J  ety€E'  iff  E'(t;,tj)  *  1 


Additionally  define  tne  token  count  N  as: 


Definition  2.23  The  token  count  of  a  graph  is  a  function 
N  :  P  — where 

If  p£-E  then  N(P)  for  e«-€P 

CM  * 

figure  2.7  snows  the  graphical  representation  of  a  marked 
graph  where  the  number  of  tokens  on  an  edge  e*j  corresponds 
to  fl'(eij)-  The  following  theorems  and  proofs  appeared  in 
[11J  : 
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Theorem  2.11  4  marking  jji  is  live  iff  the  token  count 

N  >  0  for  every  directed  circuit  in  M. 

Proof,  i).  Assume  fJ*'  is  live  and  N ( B)  *  0  for  some 

directed  circuit  B  and  e;j  is  an  edge  m  tnat  circuit. 

By  definition,  a  sequence  CT  exists  which  enables  tj  . 
After  firing  )  *  1  and  therefore  N  (B )  =  l  in 

contradiction  with  the  assumption. 

11).  Assume  N ( B )  >  0  and  tj  is  a  node  in  directed 

circuit  B.  If  t y  is  enabled,  tj  is  live.  Otherwise  let 

tt'  be  a  node  in  B  such  that  e^j  is  in  B.  If  tj  is 

enabled,  fire  it  resulting  In  tj  being  enabled.  If  not, 

continue  to  backtrack.  Since  the  path  length  of  B  must 
be  finite  In  the  directed  circuit  beginning  and  ending 
with  ty,  this  procedure  must  halt  and  therefore  tj  is 
live. 

This  leads  immediately  to  a  corollary: 

Corollary  2.11.1  A  marking  which  is  live  remains  live 
after  firing. 

Theorem  2.12  A  live  marking  Is  safe  iff  every  edge  in  the 

graph  is  in  a  directed  circuit  with  token  count 

N (P )  »  1. 

Proof.  Clearly,  tae  token  count  of  any  directed  circuit  is 
constant.  If  N(P)  *  1  then,  the  edges  of  the  directed 


by  tne  same 


circuit  must  be  safe.  If  N(P)  £  >  i  , 
process  as  in  tneorem  2.11  transitions  in  the  circuit 
may  be  fired  until  it  tokens  appear  on  tne  same  edge. 

THeorem  2.13  For  every  finite,  strongly  connected  grapn  G 
Were  exists  a  live  and  safe  marking  for  the 
corresponding  marked  grapn  M'. 

Proof.  By  definition,  each  edee  in  6  must  lie  in  a 
directed  circuit.  Since  G  is  finite,  a  finite  number  of 
directed  circuits  exist.  Therefore  construct  f-^'  by 
placing  one  token  arbitrarily  on  each  directed  circuit. 
The  conditions  of  theorems  2.11  and  2.12  are  met  and  m' 
is  live  and  safe. 


2.  State  machine  Decomposable  Nets. 


This  class  of  petri  nets  has  been  studied  by 
Ramcnandani  [9].  A  state  machine  is  defined  as: 


Definition  2.24  A 


marked  petri  net  K  is  a 


iff 

Vt  t€T  AU(p4-.t)  >  0]  A  [i(pj,t)  >  0j  =*>  p (■  -  p j 

Vt  t€T  A  [0(pltt)  >  0J  A  [0(pj,t)  >  0J  =*>  Pf-  =  Py 
That  is,  Vt  |  «t{  » jt»|  =  1. 


This  restriction  results  in  nets  which  are  functional 
equivalents  of  finite  state  machines,  hence  the  name  state 
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machine.  Note  that  state  macnines  allow  conflict  i.e., 
nondeterminl sm . 

Definition  2.25  A  subnet  is  a  strongly  connected 

component  of  M. 

Definition  2.25  A  petri  net  M  is  state  macnine 
decomposable  iff 

)  i  C/Pt  *P  A  UTj*  »T  A  M  is  a  state  macnine. 
Several  properties  of  state  macnines  may  easily  be  snovn. 

Theorem  2.14  The  token  count  N(M)  is  constant  for  a  marked 
state  macnine. 


Proof. 

Assume 

N(m)  *  C  and  t<€T. 

By 

definition 

• 

r* 

e. 

u 

|t  H-  1 

.  Let  {p,  >  **t^  and 

tp*> 

=  t£*  with 

N(pf  ) 

*  c,  and 

Nfp^)  «  ca  ,  If  tt-  does 

not 

fire,  tne 

token 

count 

of  p,  and  are  unaffected 

by  t4-.  If  t^ 

does 

f i  re ,  by 

definition  N(p()  c,~  1  and 

N(p 

• 

4 

O 

II 

Of 

Summing  we  nave: 

^N(p)  =  c,  -l+c4  +  l*c,+c2 
and  the  token  count  does  not  chanee . 

Corrolary  2.14.1  Every  marked  state  macnine  is  bounded. 

Proof.  Since  the  token  count  N(M)  is  constant,  the  maximum 
number  of  tokens  at  any  place  is  N(M);  therefore  M  is 
bounded. 
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3.  Consistent  Petri  Nets. 

Aa  additional  class  of  petrl  nets  are  tnose  for 
which  there  exist  consistent  current  assignments. 

Definition  2.2?  A  petrl  net  M  is  consistent  iff  mere 
exists  a  function  cjb :  T  — >  I  sucn  that 

1.  Vti^T  cj>(tt)  »C pt- 

2.  Vp€P  1)  (&x  I(p,t)  *  £q>z  0(p,t:) 

j*i 

where  in  the  summation  n  ■  fl|  . 

The  function  cp  is  analogous  to  an  electromagnetic  flux  and 
the  <pc's  are  referred  to  as  the  currents  associated  with 
transitions  tt-.  Note  that  part  2  of  tne  definition  is  an 
expression  of  Kinchoff's  Law.  Part  2  requires  solving  tne 
following  set  of  linear  equations: 


cr . . . 

• 

• 

• 

• 

• 

• 

• 

<Pi 

Co  i,i . 

• 

• 

• 

• 

<P, 

• 

. 

• 

<k 

• 

• 

Cq  »,  i . 

<Pn 

where  Cc  and  C0  are  tne  incidence  matrices  for  li. 
If  a  non-zero  solution  exists,  M  is  consistent. 

Example  3.  Consider  the  net  in  Figure  2.9. 


0  110  0 

1  0  0  0  0 

Construct  CE  * 

0  0  0  1  0 
0  0  0  0  1 
1  0  0  0  0 

c0  = 
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0  0  10  0 
0  0  0  1  1 
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Therefore  M  Is  consistent. 


The  significance  of  consistency  is  that  a  consistent  system 
will  cycle  —  glren  an  Initial  marking  fJL0,  there  exists  a 
firing  sequence  such  tnat/LL.  Inconsistent  system 
will  either  consume  tokens  and  halt  or  produce  tokens  and 
become  unbounded.  These  results  are  summarized  In  two 
theorems  by  Ramchandani  [8]. 


Theorem  2.15  A.  petrl  net  M  Is  consistent  Iff 

-i  C 7 

dfj^cr5ucb  15  a  cycle. 

Proof.  1).  let  <Ptt  <pj . . .  be  the  consistent  currents  of 
the  transitions  of  M.  Let  /Jijp,)  =  <p  *  Cp  +  cj>  *C  wnere 
correspond  to  t4-. .  ,t„€pt-«  •  Then  let 
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O'*  {t,»tg...}  wnere  the  multiplicity  of  in  (Jis 
equal  to  Its  current  giving  /UL.<*>pL j  .  Since  the  sum  of 
tae  currents  Into  and  out  of  a  place  is  0, 
jj.#( pt- )  *  JU. j ( p ; )  and  jJL.*/JLj  .  Therefore  CTis  a  cycle. 
11).  Let  oe  a  cycle.  Then  =>JU..  (p,  )  .  Let 

k(  ,Ka, . . . , S*  be  the  multiplicity  of  transitions 
t(  ,t2,..  .,t,  g»p4  and  1/  *1^»».*»1J,  be  the  multiplicity  of 

A  * 

transitions  1 1  , ta, . •  • , t„(:pc«  •  2*j  =  •  Then  let 

cfXtj  )  *  *;  If  tj^*pt-  and<$<tj)  *  1;  If  tjgp^*  .  This  is 
a  consistent  current  assignment  and  therefore  M  Is 
consistent . 

Theorem  2.16  A  petrl  net  M  with  a  live,  bounded  martin* 
is  consistent. 

Proof.  Since  M  is  bounded.  Its  reachability  graph  Q(M)  is 
finite.  Since  M  is  live,  there  exists  a  strongly 
connected  subgraph  which  contains  fji  .  Tnerefore,  tnere 
exists  a  directed  circuit  in  the  subgraph  firing  all 
transitions.  Tnis  Is  a  cycle  and  tnerefore  M  is 
consistent. 

We  conclude  our  description  of  petrl  net  subclasses  by 
considering  the  hierarchical  relatlonsnips  between  classes. 
In  the  sections  on  marked  graphs  and  state  macnines,  it  has 
been  shown  tnat  botn  are  contained  within  tne  class  of 
bounded  petrl  nets.  It  Is  easy  to  show  that  the  containment 
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is  proper.  Figure  2.9  snows  a  net  wnicn  Is  bounded  but 
neither  a  marled  graph  nor  a  state  machine.  The  Intersection 
of  the  class  of  marked  graphs  and  state  machines  are  a 
degenerate  class  we  call  sequential  processes.  Theorem  2.16 
showed  that  all  live,  bounded  marked  nets  are  consistent. 
Once  again,  the  containment  Is  proper  —  Figure  2.10  Is  an 
example  of  an  unbounded  non-live  net  which  is  consistent. 
Finally  note  that  all  persistent  or  conflict  free  nets  are 
deterministic  and  therefore  may  be  reduced  to  decision  free 
nets  l.e.,  marked  graphs.  These  relationships  are  summarized 


in  Figure  2.11 


III.  STOCHASTIC  PETRI  NETS 


To  this  point  we  have  analyzed  petri  nets  on  tne  basis 
of  tnelp  structural  cnaracterl sties .  To  utilize  petri  nets 
for  computing  performance  measures,  it  is  necessary  to 
Introduce  tne  concepts  of  time  and  nondeterminism  to  tne 
basic  model.  Ve  turn  first  to  tne  question  of  modeling  time 
in  petri  nets. 

A.  TIMED  EVENTS  IN  PETRI  NETS 

An  important  concept  in  Section  II  was  tne  martring,  or 
system  state,  of  tne  net.  Tne  marlring  gives  an  instantaneous 
description  of  tne  token  content  of  eacn  place  in  tne  net. 
Tne  marking  was  cnanged  as  a  result  of  tne  firing  of  a 
transition,  Be  defined  a  tiring  sequence  as  an  allowable 
ordering  of  transition  firings  in  accordance  witn  the  rules 
for  enabling  transitions.  By  controlling  tne  dynamics  of  tne 
transition  firing  process,  it  is  possible  to  analyze  the 
cnanges  in  system  state  as  a  function  of  time. 

Several  authors  nave  addressed  tne  question  of  adding 
timing  considerations  to  petri  nets.  Two  different 
interpretations  have  resulted  from  this  work.  Sifakis  [37J 
has  proposed  that  once  enabled,  transitions  fire 
instantaneously.  A  delay  is  then  Introduced  before  tokens 
are  available  at  the  output  places  for  possible  enablings  cf 
otner  transitions.  An  alternative  view  is  that  taken  by 
Ramchandanl  [9}  and  Zuberek  [38].  In  their  models,  once 
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enabled,  transitions  fire  after  a  delay  called  the  firing 
tine.  After  the  firing  time  Is  completed,  the  net  changes 
state  by  moving  the  appropriate  toicens.  These  two 
)  Interpretations  appear  to  be  equivalent.  We  cnoose  to  use 
the  latter  interpretation  to  conform  to  the  usual  notion  of 
a  queueing  service  center. 

We  first  consider  the  case  where  transition  flrlnrs 
occur  at  discrete  time  epocns  Ta.  •••*%.*•  •  where  T0  Is 
the  instant  of  the  nth  firing. 

Definition  3.1  The  system  state  of  a  merited  petrl  net  M  Is 
a  function: 

U:T  —  >fi. 

where  Y  *  {  T| iTjj*  •  •  •  .  *  •)  » 

n(-r.)  *ju.o  , 

and  U(T„)  =/uL*  =«>  3  )  ‘fJLj  A  jJLj 

U  Is  a  step  function  witn  discontinuities  at  tnose  Instants 
of  time  In  which  the  system  changes  state. 

Definition  3.2  The  firing  time  X  of  a  petrl  net  is  a 
function: 

X:T— >R* 

where  €  T  Ht,- )  «f('  *  x 

By  this  definition,  Xj  is  the  time  required  for  a  firing  of 
the  transition  t£. 
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By  specifying  tne  firing  tine  function  X,  It  is  possible 
to  describe  tf^).  In  this  section  we  consider  the  case  where 
tne  transition  firing  times  14  are  constant  for  all 
transitions.  This  restriction  manes  it  possible  to  describe 
a  total  ordering  of  transition  firings  for  persistent  nets. 
In  tne  case  of  allowed  conflict  between  transitions*  it  is 
necessary  to  impose  a  priority  scneme  on  transition  firings 
to  resolve  tne  conflict  (tnat  is,  to  mane  tne  firing 
deterministic).  Tais  ordering  amounts  to  a  restriction  on 
tne  firing  sequences  wnica  are  allowed.  Tnose  sequences  (J 
for  which  the  ordering  holds  are  termined  feasible  firing 
schedules.  Ramchandani  has  shown  that  for  timed  marned 


grapns  and  live,  safe,  and  persistent  petri  nets  a  periodic 
feasible  firing  schedule  exists.  He  additionally  derived  an 
upper  bound  on  tne  computation  rate  (cycle  period)  for  state 
machine  decomposable  nets.  Tne  bound  is  given  by: 
pmax  =  mlntp.p^.p^J 

where  pn  is  the  cycle  time  for  eacn  circuit  in  tne 
corresponding  net  and  is  given  by: 

N(C  i) 


2*i 


where  N(C^)  is  tne  tofcen  count  for  circuit  C4 *  xj  is  tne 
sum  of  the  firing  times  for  the  transitions  in  Cc* ,  and  <£4  is 
tne  current  associated  with  tnat  circuit  in  a  minimal 
current  assignment.  Ramchandani  also  argues  tnat  this 
formula  can  serve  as  a  first  order  approximation  where  tne 


mean  firing  times  TQ  are  substituted  for  tne  deterministic 
firing  time  in  tne  formula.  A  slightly  different 
derivation  of  tee  same  result  was  made  by  Ramamoorthy  and  Ho 
[39  J . 

B.  MARKOV  ANALYSIS  OF  PETRI  NETS 

Research  Into  the  behavior  of  timed  petri  nets  to  date 
has  concentrated  on  deterministic  nets  with  constant  firing 
times.  As  noted  in  Section  I,  this  approach  falls  to  account 
for  the  randomness  and  uncertainty  wnicn  characterize  actual 
systems.  We  propose  that  nondeterminism  be  modeled 
probabilistically  In  tne  net.  Our  metnod  differs  from 
previous  wort  by  emphasizing  the  stocnastic  nature  of  the 
system  state  (marking).  In  this  way,  it  is  possible  to  apply 
the  Known  methods  of  queueing  theory  to  analyze  tne 
probabilistic  properties  of  these  nets  which  we  call 
stocnastic  petri  nets.  We  introduce  in  tnis  section  two 
sources  of  nondetermlnism  which  will  be  modeled  by  the 
stocnastic  petri  nets  —  random  transition  firing  times  and 
the  probabilistic  firing  of  simultaneously  enabled 
transitions. 

We  first  snow  that  if  the  firing  time  i  for  each 
transition  is  considered  to  be  a  random  variable  rather  than 
a  deterministic  one,  it  is  possible  to  analyze  the  token 
content  of  the  net  as  a  stochastic  process. 
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Definition  3.3  Tfle  firing  time  is  an  independent, 

identically  distributed,  random  variable  sucn  tnat 
Vti  €  T  x;„  is  the  firing  time  for  tne  ntn  firing  of 
transi  tl  on  t£  . 

The  requirement  tnat  X[  is  independent  and  identically 
distributed  is  necessary  for  our  derivation  of  a  Martov 
cnain  representation  for  tne  net  state  space.  In  tne  case  of 
computer  networks,  Xleinroct  [40]  has  investigated  this 
requirement  which  he  has  named  the  message  independence 
condition.  Tnls  assumption  is  somewnat  artificial  m  that  it 
implies,  for  example,  that  the  time  required  to  process  the 
sane  message  at  two  nodes  is  independent.  This  difficulty 
notwithstanding,  results  for  an  analysis  of  the  ARPA  net 
show  some  evidence  for  the  validity  of  this  assumption  [41] . 
Applying  the  metnods  of  probability  theory,  tne  firing  time 
distribution  may  be  defined  as: 

Definition  3.4  Tor  ail  t£€T*  if  is  tne  firing  time  for 
tt  * 

Sj  (x)  *  PtXt'5*  x] 

In  the  usual  way  we  define  the  density  function: 

Definition  3.5  For  all  transitions  t£  <=  T,  tne  firing  time 
density  function  is  given  by 

st-(x)  *  d/ix  [S x )]  *  pllt'  *  x] 
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Likewise  define  tne  moments: 


Definition  3.6  The  ntn  moment  of  tne  firm*  time  density 
function  is  given  by: 

SIX*  P  -  I  xns^ (x)dx 

and  in  particular  B[X^j  **T^‘  *  l/)Lk  ls  meaD  firing 

(service)  time*. 

Tnese  definitions  make  it  possible  to  model  systems  by 

applying  tne  appropriate  distributions  to  tne  firing  time 

function.  It  ls  clear  tnat  tne  feasible  firing  sequences  CT 

for  a  petri  net  are  no  longer  deterministic.  It  is  necessary 

to  consider  now  tnis  nondeterminism  can  occur  in  tne  net. 

Referring  to  Figure  3.1(a),  it  can  be  seen  tnat  transitions 

t2  and  *4  are  both  enabled,  rfith  random  firing  times,  tne 

sequences  t2,t^  and  t^,t2  are  botn  possible.  In  tnis 

instance  the  effect  of  the  nondeterminism  is  unimportant  to 

overall  system  operation  since  tne  two  processes  are 

Independent  at  this  point.  A  more  interesting  situation  ls 

depicted  in  Figure  3.1(b).  The  transitions  t2  ,  t^,  and  t+ 

are  in  conflict.  To  analyze  tnis  type  of  nondeterminism  it 

ls  necessary  to  specify  the  branching  probabilities  for  each 

of  tne  possible  patns.  mere  are  several  possible  ways  this 

may  be  accomplished.  For  example,  each  simultaneously 

*  The  mean  service  rate  )JL  ls  an  unfortunate  conflict  in 
notation.  Due  to  its  long  standing  use  in  tne  literature,  we 
will  use  this  notation  pointing  out  its  meaning  wnere 
confusion  mignt  exist  witn  tne  earlier  definition  of 
marking. 
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enabled  transition  may  begin  firing  at  once  witn  tne 
transition  wnicn  completes  firing  first  causing  tne  maricing 
to  change.  Tne  problem  of  determining  wnicn  transitions  are 
simultaneously  enabled  is  a  significant  one.  Ve  can  simplify 
the  problem  by  restricting  our  analysis  to  free  choice 
places. 

Definition  3.7  A  place  p  is  free  cnolce  iff 

|p-.|  *  1  vV*jtf  V€Pi#  =B>  "V  *  {pt} 

A  free  choice  place  is  one  wnicn  either  has  a  unique  output 
transition  or  is  the  only  input  place  to  eacn  of  its  output 
transitions.  This  restriction  ensures  that  a  marking  for  p 
will  either  enable  all  of  its  output  transitions 
simultaneously,  or  will  enable  none  of  them.  With  this 
restriction,  it  is  now  possible  to  define  tne  brancning 
probabilities  for  the  output  transitions  of  a  free  choice 
place. 

Definition  3.8  The  branching  probability  for  a  free  choice 
place  p^  with  p^#  «  {t,  ,t2,. ..  ,tn>  is 
bey  «  P[tj  will  fire  !  tjft2,  ...,t .  are  enabled] 
such  tnat: 

9  <bej<  1 
and 

«  1  wnere  n  -  |p£»| 
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We  make  the  assumption  that  these  prooabill ties  are 
functions  of  the  firing  distributions  for  tne  output 
transitions  only  and  in  particular,  that  they  are  constant 
and  Independent  of  the  marking. 

By  allotting  these  sources  of  nondeterminism,  the  system 
state  U  may  be  expressed  as  a  stochastic  process. 

Definition  3.9  Let  U('f),  the  system  state  of  a  petri  net 
M,  be  a  random  variable  and  a  function  of  time  where 
U(T)  -  [u,  (f)  ,ua(*r) , . . .  ,u„  (T)]  such  that  Uj  (*T)  =/Jv(p  [)  • 
U(  )  is  a  discrete  state,  continuous  time  stochastic 
process  described  by  the  probability  distribution: 

tfL  (jjtf'f*)  a  p[0(r,  )  “  fM  t  •  0  ("1 #.«»»Od^  )  =/-Lfi  1 

••  •  */X„€Q(M). 

U(T)  describes  the  manner  in  which  the  system  moves 
between  states  in  the  reachability  set.  It  should  be  noted 
that  the  distribution  tA  (fj.s’f)  is  equivalent  to  expressing 
the  probability  that  some  feasible  firing  sequence  (j  exists 
such  that  .  Therefore,  it  is  possible  to  extend  the 

definition  of  liveness. 

Definition  3.10  A  transition  t  €T  is  live  for  state  D 
iff 

Vo  3a;  ®j  a  pco’ji>0  «*> 

3o^  0  pCO^J  >0  A  t;  €  s* 
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Theorem  3.1  For  a  live  stochastic  petri  net  M  with  marking 
and  initial  marking  JjLo€0(M), 
p[H<T)  =M-i3  >0 

Proof.  Assume  p[0(-T)  “M-J  =  0-  Tnen  *«»«  probability  tnat 
a  firing  sequence  <J  exists  such  that  fJ is  zero  in 
contradiction  with  the  assumptions  of  Definition  3.10 
and  therefore  M  cannot  be  live. 

We  are  interested  in  determining  the  conditions  for  wnicn  TJ 
is  a  Markov  chain,  that  is,  when 

3  *  /■!„„  *  •••• 

Mr.)  -ju,.]  =  p[a(r^  )  •  fJLnt,  !  a <rn)  =/xj. 

In  addition,  we  are  interested  in  determining  the 
stationary  (time  independent)  state  probabilities  if  they 
exist.  We  first  consider  the  case  of  state  machine 
decomposable  petri  nets. 

C.  CLOSED  PETRI  NET  SISTEMS 

To  express  tne  system  state  transitions  as  a  Markov 
process  it  is  first  necessary  to  derive  expressions  for  the 
arrival  and  departure  processes  for  tne  places  in  the  net. 
This  may  be  accomplished  by  considering  the  net  as  a 
collection  of  nodes,  each  of  which  has  a  well-defined 
benavior,  and  in  particular,  for  wnicn  tne  arrival  and 
departure  processes  may  be  expressed  analytically. 
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A  node  In  a  petri  net  is  defined  as: 

Definition  3.11  A  node  a  in  a  petri  net  is  a  subset  of  tbe 
set  {P|JT>  sucn  tnat 

Vt£  €  T  tt  €  n  <=*> 

Vpj  P »;€  *tt-  <=*>  Pj  €n 

AVtK  t2€Pj*  <”>  tK€n 

Theorem  3.2  Tne  node  set  [n J  *  n,  ,  n2,...,nn  is  a 
partitioning  of  a  petri  net  M. 

#% 

Proof,  i.)  yn£  «{P(JT>.  By  definition,  every  transition  t 
is  trivially  an  element  of  some  node  n*.  Assume  tnere 
exists  a  place  pj  such  tnat  pj^(n;,  n2,...,nft).  By  the 
definition  of  a  petri  net,  p j  has  (at  least)  one  input 

transition  tj  .  Since  t£  is  an  element  of  some  node,  by 

Definition  3.11  p j  is  an  element  of  that  node, 
ii.)  Vna  ,nfc  ^  [nj  n*  «  y  nk  f)  n^  =  0.  Assume  there 

exists  some  transition  t£  €{n»,n  nb) .  Let  pj  be  an  input 
place  to  tt'  and  an  element  of  a*.  Tnen  by  Definition 
3.11  p j  is  also  an  element  of  nb.  Now  let  t^  be  an 
output  transition  to  pj  and  an  element  of  na.  Again  by 
definition  tK  is  also  an  element  of  n^  and  therefore 
na  *  n^ 

Likewise,  assume  there  exists  some  place 

p j  €C*»nni»)*  ®y  t&e  same  reasoning  n*  *  n&.  Therefore, 
tbe  set  of  nodes  defines  a  partitioning  of  M.  QSD. 
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Figure  3.2(a)  snows  tne  node  partitioning  of  an 
arbitrary  petri  net.  Now  consller  tne  single 
place/transition  node  n(.  Figure  3.2(b)  is  tnis  none  witn  an 
arbitrary  marking.  Since  we  nave  assumed  tnat  tne  transition 
in  tnis  node  is  firing  wnenever  enabled,  we  nave  tne 
important  result  that  this  node  is  equivalent  to  a  single 
server  queueing  system. 

The  marking  for  p,  which  we  have  defined  as  tne  state 
element  u,  includes  the  tokens  being  fired  or  waiting  to 
fire.  Two  features  of  tnis  representation  snould  be  noted. 
First,  all  tokens  are  identical;  no  token  classes  exist. 
Second,  no  queueing  discipline  is  modeled  in  the  system. 
This  places  a  restriction  on  the  ability  to  derive  analytic 
solutions  for  the  system. 

To  describe  the  operation  of  tne  node,  tnat  is, 
determine  the  local  state  probabilities  P(U(*f)  *  u] ,  it  is 
necessary  to  cnaracterize  tne  arrival  and  departure 
processes.  It  is  well  known  that  the  exponential 
distribution  is  tne  only  continuous  distribution  for  wnlch 
the  Markov  property  holds.  In  addition,  it  has  been  shown 
[33]  that  arbitrary  work  conserving  queueing  disciplines 
result  in  equilibrium  product  form  state  probability 
solutions  for  exponential  firings.  Therefore  we  assume  the 
firing  time  distribution  S(x)  to  be: 
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Definition  3.12  The  firing  time  distribution  for 


transition  t‘L  is  given  by 
S{  (x)  *  1  “  exp(-|jLjX ) 
v nere  tne  mean  firing  rate  is  jJLj;. 

The  requirement  that  tne  queueing  discipline  be  work 
conserving  means  tnat  no  knowledge  of  tne  firing  time 
requirements  is  used  in  selecting  tokens  for  firing.  It  is 
clear  from  tne  indeterminate  nature  of  tne  tokens  in  petrl 
nets  that  this  is  indeed  the  case  and  therefore  we  are 
Justified  in  asserting  that  the  Markov  property  holds. 

Finally,  it  is  necessary  to  determine  tne  arrival 
process  for  tne  node.  In  tne  case  of  closed  networks  (and 
tne  petri  nets  we  nave  considered  thus  far),  tne  arrivals 
are  made  up  of  departures  from  other  nodes  in  tne  net.  It  is 
assumed  tnat  upon  completion  of  firing,  the  tokens 
immediately  enter  tneir  associated  output  places.  Tnerefore, 
tne  arrival  process  may  be  characterized  as: 


Befinltion  3.13  Tne  arrival  rate  f,; 
given  by: 


n--2  n 

j«i  * 


’ ji . 


for  a  place 


where  £*y  is  the  arrival  rate  for  node  n j ,  bji  is 
branching  probability  tnat  a  departure  from  node 
arrives  at  node  ny,  and  m  is  tne  rank  of  [n] . 


is 


tne 


n; 


* 


-r 


0 
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Note  teat  we  nave  not  specified  tne  arrival  distribution 
itself.  It  nas  been  snown  by  Burhe's  theorem  (42J  and 
several  extensions  (for  example  [3J  ) ,  tnat  in  many  cases  tne 
arrival  process  is  asymptotically  Poisson. 

To  summarize,  we  nave  made  tne  following  assumptions 
concerning  the  petri  net  state  transition  process: 

1.  Firing  times  are  independent. 

2.  Flrin*  times  are  continuous  and  exponentially 

distributed. 

3.  The  queuein*  discipline  is  worn  conserving. 

4.  Nondeterminlstlc  transitions  between  nodes  are 

determined  by  constant  branching  probabilities. 

5.  There  is  no  overhead  in  transition  firings; 
transitions  fire  whenever  enabled. 

In  Section  II  we  considered  the  class  of  state  machine 
decomposable  nets  and  state  macnines.  Figure  3.3  is  an 
example  of  such  a  net  with  its  associated  nodes. 

Theorem  3.3  Each  node  in  a  state  machine  contains  exactly 
one  place. 

Proof.  By  definition,  eacn  transition  has  a  single  input 
place.  Trivially  then,  there  must  be  at  least  one  place 
in  each  node.  Without  loss  of  generality,  assume  there 
exists  a  node  with  two  places  p{  and  p?  witn  t4<  £  p .  By 
implication,  pa*  and  therefore  Paj^*tc'  in 
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contradiction  with  tne  definition  of  a  node.  Therefore, 


there  is  at  most  one  place  in  each  node.  QED. 

Tne  next  result  follows  immediately: 

Corollary  3.3.1  The  places  in  a  state  machine  are 
free-choice . 


Since  tne  places  are  free-choice,  it  is  possible  to 
assign  tne  brancning  probabilities  to  tne  output 
transitions.  These  transitions  are  not  multiple  servers, 
rather,  they  represent  the  possibility  for  tokens  whlcn  must 
be  handled  differently.  It  is  necessary  therefore,  to  create 
composite  places  to  deal  with  this  requirement.  The 
resulting  net  we  call  the  stochastic  equivalent  petrl  net 
(SEN). 


Definition  3.14  The  stochastic  equivalent  net  for  a  petri 
net  M  is  constructed  as  follows: 

for  every  place  p  in  P,  assign  a  set  (7T,  »7Ta»  •  •  •  ,trn> 
where  n  « Jp^j  ,  VtK  €  T  I (TTj»t k)  *  Kp^.tj),  and  if 
Pi*  *  It,  ,ta,...,t„> 


°(TTjf  tK) 


0(p;. . ,)  J-k 
0  otherwise 


la  the  associated  graph,  each  edge  from  a  transition  in  «p; 
to  the  set  (IT,  ,1TZ, . . .  >  is  Joined  by  an  arc  and  labeled 
with  the  appropriate  branching  probability. 
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The  SEN  for  the  petrl  net  la  Figure  3.3  is  depicted  in 
Figure  3.4.  Eacn  node  in  tae  SEN  consists  of  a  single  place 
and  transition,  vita  tae  branching  probabilities  occurring 
at  tae  output  from  tne  transitions.  It  is  clear  from  the 
definition  that  tae  SEN  has  the  same  properties  of 
boundedness,  likeness,  and  consistency  as  tae  associated 
petri  net. 

It  is  now  possible  to  obtain  the  analytic  solution  for 
tae  petri  net  by  treating  is  as  a  closed  queueing  network. 

Theorem  3.4  The  SEN  for  a  state  machine  with  a  live 
marking  is  ergodlc. 

Proof.  By  theorem  2.12,  a  state  machine  is  bounded  and 
therefore  tne  state  space  (reachability  set)  is  finite. 
Lien  has  shown  [43,  thm  11J  that  the  state  space  for 
this  class  is  strongly  connected.  Therefore,  the  state 
space  is  irreducible.  Since  it  is  finite,  tne 
probability  of  reaching  some  state,  PLO,-J,  is  greater 
than  zero.  Tnerefore  tne  state  space  is  recurrent  and 
noa~null.  By  definition  therefore,  the  state  space  is 
ergodlc  and  likewise  the  SEN  is  ergodlc. 

Thus,  equilibrium  state  probabilities  exist  for  the  system; 
that  is, 

P[CJ  -  lim  P[U,rJ 
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This  type  of  system  was  solved  by  Gordon  and  Newell  [30 J  .  At 
equilibrium,  tae  derivative  d/dT( P[U,TJ )  must  vanisa  for 
each  state  la  tbe  state  space.  Tais  allows  tae  elobal 
balance  equations  for  tne  system  to  be  written.  For  some 
state  (J[  ,  tne  rate  of  caanee  of  probability  is  determined  by 
the  rate  of  flow  of  probability  into  the  state  due  to 
arrivals  and  the  rate  of  flow  of  probability  from  tne  state 
due  to  departures.  This  may  be  written  as: 

d/dT  (P[tF,T)J  *  P[(u,  ,uA J  )  Z  §(ut  - 

t  Z  6<u;  ifJLfiLi  'PKu,  ,U2 . Qj-l . U-+1,  ...,U„)] 

4«4  J*  J  4 

*  0 

where  §( u ^ )  is  tne  unit  step  function  given  by 

0  if  u<  *  0 
1  otherwise 

These  equations  may  be  solved  directly  to  within  a  constant 
which  may  be  determined  by  addlne  the  requirement  that 

Z  P[0- J  *  1 

The  product  form  solution  to  these  equations  is  [30 J 

p[oj  *  p[(u|fua . uh)j  *  u/Gun  n ^ 

4*1 

where  K  *  N(U)  and  tae  are  solutions  to  equations 

a 

JUL^»X^  *  2  jULj’Xj i  ( lal » 2» ...  *n) . 

The  hormallzatlon  constant  G(K)  is  given  by 
G(S)  -  T  f[  x? 

u  t«i 

Algorithms  have  beea  found  for  computing  G(K )  and  the  x; 
[42]. 
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D.  OPEN  PETRI  NET  SYSTEMS 

Since  tne  SEN  for  a  state  machine  has  been  snows  to  be 
equivalent  to  closed  networks  of  queues,  tne  question  arises 
as  to  whether  petrl  nets  can  be  defined  which  are  analogous 
to  open  networks.  Sucn  a  system  may  model  tne  occurrence  of 
external  events  such  as  the  arrival  of  Interrupts. 
Alternatively,  the  model  may  represent  a  communications 
system  where  messages  enter  and  are  removed  from  the  system 
at  various  points.  To  Incorporate  tnese  external  events, 
Definition  2.1  may  be  extended  as  follows: 

Definition  3.15  An  open  marked  petrl  net  OM  Is  a  marked 

petrl  net  where 

T  *t i  *  <p  <*>  t^  Is  a  source 

tj*  <=>  tt-  Is  a  sink 

It  Is  assumed  taat  tnese  transitions  may  source  or  sink  an 
infinite  number  of  tokens.  The  flrin*  rates  are  defined 
as  before  except  that  yc  -  is  tne  mean  arrival  rate  for 
source  . 

The  possibility  of  external  arrivals  requires  a 
modification  of  tne  earlier  arrival  process  definition. 

Definition  3.16  The  arrival  rate  p.  for  a  node  is  elven  by 

r>y.-*2  ij  v 

J’l  i 

It  can  be  seen  that  Definition  3.13  is  a  special  case 
wnere  '^’*6  for  1  *  1,2,. ..,n. 
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Several  observations  can  be  made  concerning  the  ways  in 
wtticn  tbe  properties  of  liveness,  boundedness,  and 
consistency  are  affected  by  tne  addition  of  sources  and 
sinics.  First,  consider  tne  case  of  marked  grapns.  Recall 
tnat  for  a  marked  graph,  eacn  place  is  conflict  free.  Figure 
3.5(a)  shows  part  of  a  marked  graph.  To  meet  the  conflict 
free  requirement,  source  and  sing  transitions  can  be  added 
to  the  net  only  at  existing  transitions  (with  intervening 
places  being  added).  In  Figure  3.5(b),  a  source  transition 
stl  has  been  aided  at  transition  tg  and  in  Figure  3.5(c),  a 
sink  transition  st2  has  been  added  at  transition  t^. 

Theorem  3.5  Liveness  in  maned  grapns  is  unaffected  by  tne 
addition  of  source  or  sin*  transitions. 

Proof.  By  definition,  a  source  transition  is  live,  and 
therefore  liveness  is  unaffected  by  the  addition  of  a 
source.  Now  consider  a  transition  in  tne  net  t^  with  a 
sink  transl tion/place  pair  added  to  the  output.  If  t^  is 
live,  it  can  be  fired  by  some  sequence  which  will  then 
enable  the  sink  transition?  therefore,  tne  sink 
transition  is  live  and  liveness  is  conserved. 

Theorem  3.6  A  marked  graph  remains  bounded  after  addition 
of  source  and  sink  transitions  except  in  the  places 
associated  with  those  transitions. 
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figure  3.5  Addition  of  source  and  sink  transitions  to  petrl  nets, 
(a)  marked  erapft.  (b)  marked  graph  with  source  stl.  (c)  marced 
grapn  with  sink  st2.  (d)  state  macnine  net  wltn  sources  and  sines 
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Tfiis  result  is  clearly  true  by  tbe  definition  of  transition 
firing.  It  snoull  be  noted  tnat  the  general  results  of 
queuein*  theory  require  that  the  places  associated  with  tne 
source  and  sink  transitions  be  unbounded  (if  exponential 
arrivals  and  departures  are  assumed). 

In  terms  of  tne  dynamic  operation  of  marked  graphs,  it 
can  be  seen  from  Figure  3.5  tnat  tne  existence  of  sink 
transitions  has  no  effect.  The  source  transitions  operate  by 
controlling  tne  enabling  of  the  net  transitions  to  which 
they  are  connected;  tney  set  an  upper  bound  on  tne  firing 
rate  of  the  transition. 

In  tne  case  of  state  macnlnes,  tne  source  and  sink 
transitions  are  added  to  existing  places  in  the  net  (see 
Figure  3.5(d)).  Tne  nondeterministlc  nature  of  state 
machines  results  in  changes  to  the  properties  of  the  net 
after  tne  Addition  of  tne  sources  and  sinks.  For  example,  if 
a  sink  transition  is  aided  to  a  live  state  machine,  tne  net 
cruirf  eventually  terminate  since  tne  sink  must  eventually 
become  er.at.iM  resulting  in  the  loss  of  a  token  to  tne 
system.  ¥*en  sources  are  added,  the  net  will  become  become 
unfounded.  Since  tne  source  can  be  fired  arbitrarily  often, 
the  token  count  of  tne  output  place  to  tne  source  can  become 
arbit  artiy  large . 

ly  generalizing  the  closed  network  queueing  model 
developed  in  tne  previous  section,  tne  solution  for  state 
machines  with  sources  and  sinks  may  be  obtained.  Once  again. 
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the  net  is  transformed  Into  its  stocnastlc  equivalent.  A 
slna  is  added  to  a  node  J  by  adjusting  tne  branching 
probabilities  of  tne  transitions  in  j  so  that  the 
probability  of  departure  from  the  system  at  node  J,  P[d  J, 
obeys: 

P[d]  a  l  ~  £  b  - •  where  n  is  It^l. 

A  source  is  added  to  node  j  by  inserting  an  edee  directed 
into  the  place  in  J  and  labeled  with  the  mean  arrival  rate. 

Since  it  is  possible  for  the  net  to  become  unbounded 
after  adding  sources  and  sinks,  it  is  necessary  to  require 
that  Ij  <  fJlj  for  every  node  in  the  SEN  to  ensure  that  the 
net  remains  ergodlc. 

Once  acaln,  the  solution  involves  writing  the  global 
balance  equations  for  the  system,  i.e.: 

Vflj  ^  PCBt-J  (rate  of  flow  from  into  Uj  ) 

*  P[Uy]  (rate  of  flow  out  of  Uj  ) 

Basket  [32]  has  shown  tnat  the  general  product  form  solution 
for  this  system  is  of  the  form 

P[0]  *  Cd(0)ft  (u,)fjj(ujj)...ff,(uri) 

where  C  is  the  normalization  constant  needed  to  ensure 

£  ?[&{]  - 1  , 

in 

d ( CJ )  is  an  expression  for  the  exogenous  arrival 

rate, 

n 

d(6)  *£y<,for  Poisson  arrivals  at  constant  ratey,;, 
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and  f,:  (ut- )  is  a  function  of  tne  queue  discipline. 

For  FCFS,  =  1/u..  ftr-  -ULV 

j  \  p-i] 

E.  CONSISTENT  PSTfil  NET  SISTEMS 

Tne  nost  general  petri  net  class  we  consider  is  tnat  of 
lire,  bounded,  and  consistent  nets.  Tne  solution  to  tnis 
class  proceeds  Identically  to  tnat  used  earlier.  Tne  net  is 
first  transformed  into  its  stocnastic  equivalent  net  rorm  by 
tne  metaod  of  Definition  3.13.  Figure  3.6(a)  snows  bow  an 
arbitrary  node  in  tne  petri  net  is  transformed.  Note  tnat  in 
the  resulting  node  12,  two  places  are  required  as  input  to 
transition  t^  and  therefore  tnis  node  does  not  model  tne 
simple  queue/serrer  pair  wnlcn  was  seen  earlier  for  state 
macnlnes.  Another  possibility  for  a  SEN  node  is  tnat  tne 
transition  has  multiple  outputs  witn  branching  probabilities 
bij-  all  equal  to  1.  Tnese  two  situations  are  shown  in  Figure 
3.6(b).  It  has  been  shown  (44j  that  these  types  of  nodes 
(also  referred  to  as  Join  and  fort  nodes)  do  not  satisfy 
local  balance  and  therefore  product  form  solutions  do  not 
exist  for  this  class  of  nets.  However,  since  the  net  is 
bounded,  by  the  results  of  Cnapter  II  the  reachability  set 
(and  state  space)  is  finite  and  therefore  the  elobal  state 
equations  can  be  solved  numerically  [45 J  . 

In  the  case  of  consistent  nets  with  sources  and  slnics, 
it  is  possible  for  the  net  to  become  unbounded  since  the 
sources  may  fire  arbitrarily  often  and  therefore  finding  the 
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solution  to  tne  global  balance  equations  becomes 
Intractable.  In  tnis  case,  approximation  tecnnlques  sucn  as 
aggregation  or  tne  diffusion  approximation  146]  must  be 
resorted  to.  Tne  applicability  of  tnese  tecnnlques  to  petrl 
nets  is  an  open  question,  but  one  which  nas  the  potential  to 
extend  the  modeling  power  of  petrl  nets  to  more  interesting 
systems. 
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IV.  CONCLUSIONS 


Tuts  tnesis  nas  addressed  tne  problem  of  computer  system 
performance  analysis  through  the  use  of  the  petri  net  model. 
The  model  has  wide  applicability  to  tne  analysis  of  both 
hardware  and  software  systems,  particularly  those  which 
exhibit  concurrency  or  asynchronous  operation.  Due  to  tne 
power  of  tne  petri  net  approach,  it  is  necessary  to  restrict 
the  structure  of  the  nets  resulting  in  a  hierarchical  class 
relationship  between  petri  net  types. 

The  classes  of  greatest  interest  in  system  modeling  are 
marked  grapns,  state  machines,  and  consistent  nets.  All 
three  of  these  classes  were  Shown  to  have  the  properties  of 
boundedness,  liveness,  and  consistency  which  are  useful  in 
the  verification  of  computer  system  correctness.  Of  tne 
three  classes,  the  class  of  consistent  nets  is  the  most 
useful  in  modeling  in  tnat  it  can  represent  the  greatest 
ranee  of  possible  systems  —  and  is  also  the  most  difficult 
to  analyze  mathematically. 

It  was  seen  tnat  the  general  problem  of  reachability, 
and  the  set  of  states  in  which  a  marked  petri  net  could 
enter,  was  a  primary  consideration  in  the  analysis  of  the 
nets.  In  particular,  an  algorithm  was  presented  for 
determining  the  state  space  for  the  class  of  bounded  petri 
nets. 
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By  defining  the  firing  times  for  the  transitions  in  the 
net,  it  was  possible  to  extend  tne  analysis  of  petrl  nets  to 
their  dynamic  execution.  Random  firing  times  allowed  tne 
nets  to  model  lata  dependent  events.  This  concept  led  to  the 
ldeatlfl cation  of  nondetermlnism  in  tne  petri  net  execution. 

Petri  nets  with  random  firing  times  were  shown  to  be 
analogous  to  closed  queueing  networks.  A  major  difficulty  in 
this  approach  is  the  inability  to  model  queueing  disciplines 
in  the  places.  However,  if  exponential  firing  is  assumed, 
tne  analysis  can  be  conducted  without  detailed  knowledge  of 
the  structure  of  the  queue.  In  this  context,  the  stochastic 
equivalent  net  was  introduced  as  a  method  for  demonstrating 
the  correspondence  between  petri  nets  and  queuein*  networks. 
This  permitted  tae  state  probabilities  to  be  determined 
through  the  known  techniques  of  queueing  theory. 

The  definition  of  petri  nets  was  extended  to  allow  for 
events  which  take  place  external  to  tne  system  itself. 
Again,  the  resulting  stochastic  equivalent  net  corresponds 
to  a  queueing  network  —  in  tnis  case  tne  open  network 
model . 

It  appears  tnat  this  approacn  to  petri  net  modeling  can 
utilize  more  of  the  recent  results  of  queueing  network 
theory,  for  example,  solutions  nave  been  found  for  state 
dependent  routing  (branching)  probabilities,  and  state 
dependent  arrival  and  departure  rates.  Additional  work  is 
required  to  determine  if  tne  use  of  petri  net  based 


stoc&astic  models  simplifies  the  problem  of  reducing  system 
design  criteria  and  parameters  to  a  form  vnicn  permits  tne 
application  of  queueing  network  techniques. 
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APPENDIX  A 
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LIST  OP  NOTATION 

probability  that  transition  J  will  fire  eiven 

tnat  place  i  enables  transitions  t(,t2,...,tn 
input  incidence  matrix  for  a  petri  net 
output  incidence  matrix  for  a  petri  net 
tbe  set  of  edges  in  a  marked  eraph  between 
transitions  1  and  j 

a  current  assignment  for  a  transition  in  a 
consistent  net 

tne  firing  function  for  a  transition  t  and 
state  0  in  a  petri  net 
tne  total  mean  arrival  rate  at  node  i 
the  input  function  for  place  p  and  transition  t 
a  marked  petri  net  <P,T,I,0 ,jj> 
a  marked  graph  <T' ,E'  ,fX> 
tne  marking  function  for  a  marked  petri  net 
(section  2) 

the  mean  firing  rate  for  transition  i  (sec  3) 

a  petri  net  <P,T»I,0> 

the  token  count  for  a  set  of  places  P 

the  output  function  for  place  p  and  transition  t 

the  set  of  places  in  a  petri  net 

a  composite  place  in  a  stochastic  equivalent  net 
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a.  b 


Q(M) 


tae  reacnabllity  set  (space  state)  for 


petri  net  M 

H(T)  tae  reacnabllity  set  for  a  vector  addition 

system  V 

tae  computation  rate  for  a  discrete  time  petri  net 
a  firing  sequence  ( t,  ,  ta, . . .  ,t„ ) 

SK  tae  enabling  set  tt,,ta . t„}  enabled  by 

marking  fJ.K 

S(x)  the  transition  firing  time  distribution 

s(x)  tae  transition  firing  time  density  fuctlon 

T  tae  set  of  transitions  in  a  petri  net 

tne  state  of  a  petri  net  (u,  ,u4, .. .  ,u„)  wltn 
marking  fJL • 

V  a  vector  addition  system  <d,W> 

W  tae  vectar  set  in  a  vector  addition  system 
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